OrganisationUS

Food Lion

US supermarket chain owned by Ahold Delhaize.

On 19 October, Food Lion remained open in person while online shopping stayed unavailable during a deliberate outage across parent Ahold Delhaize's brands.

Last refreshed: 22 October 2026 · Appears in 1 active topic

Key Question

When will Food Lion's online shopping fully recover from the October incident?

Timeline for Food Lion

#15 19 Oct

Ahold Delhaize confirms attack on brands

Cybersecurity: Threats and Defences

View full timeline →

Follow Cybersecurity: Threats and Defences →

Background

Food Lion is a United States supermarket chain owned by Ahold Delhaize. It operates as one of the group's American grocery brands, combining physical shops with online grocery shopping services.

Food Lion was among the brands affected when Ahold Delhaize confirmed deliberate outages across its American and European operations on 19 October 2026. Stores remained open throughout the reported outage, but online shopping in the United States was still unavailable on that date. Ahold Delhaize reported no sign that data had been taken. The incident disrupted Food Lion's digital channel while leaving its physical retail operation able to trade in person.

Common Questions

What is known about sensitive Food Lion customer data?

As of 19 October 2026, Ahold Delhaize said it had no evidence that sensitive customer, associate or partner data was taken. Its investigation was still ongoing.Source: Ahold Delhaize

What happened to Food Lion's online shopping in October 2026?

Food Lion's online services were disrupted after Ahold Delhaize took systems offline during a cyber incident. Stores remained open while US e-commerce recovered in phases.Source: Ahold Delhaize

Where does Food Lion operate?

Food Lion operates more than 1,100 stores across ten Southeastern and Mid-Atlantic US states.Source: Food Lion

Who owns Food Lion?

Food Lion is a company of Ahold Delhaize USA, the US division of Netherlands-based Ahold Delhaize.Source: Food Lion

Source Material

Ahold Delhaize confirms malicious actions caused cyber outages at grocery brands Ahold Delhaize update on status of cybersecurity incident Quick Facts

How the World Sees Them

FirstVDS

There are no traces of the attack on the affected virtual servers

ESET

first documented case of Yggdrasil being abused in this way by a state-aligned threat actor

Cyber Security Agency of Singapore

Attackers are exploiting

Canadian Centre for Cyber Security

open-source reporting indicating that the vulnerability is being exploited in the wild

Ahold Delhaize (Frans Muller)

was caused by the malicious actions of others

ENISA

the manufacturer is not required to comply with the vulnerability handling obligations

CERT-FR (ANSSI)

probablement toujours en cours

ASOS

impersonating a trusted contact

Check Point

actively exploited on Spark Firewalls as of September 12, 2026

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.